Merge pull request #10040 from righettod/ibm_sam_upd
Add more matchers to the "IBM Security Access Manager" login panel detection template.patch-4
commit
3effae3c9d
|
@ -2,7 +2,7 @@ id: ibm-security-access-manager
|
||||||
|
|
||||||
info:
|
info:
|
||||||
name: IBM Security Access Manager Login Panel - Detect
|
name: IBM Security Access Manager Login Panel - Detect
|
||||||
author: geeknik
|
author: geeknik,righettod
|
||||||
severity: info
|
severity: info
|
||||||
description: IBM Security Access Manager login panel was detected.
|
description: IBM Security Access Manager login panel was detected.
|
||||||
reference:
|
reference:
|
||||||
|
@ -14,8 +14,9 @@ info:
|
||||||
metadata:
|
metadata:
|
||||||
max-request: 1
|
max-request: 1
|
||||||
vendor: ibm
|
vendor: ibm
|
||||||
|
shodan-query: http.title:"IBM Security Access Manager"
|
||||||
product: security_access_manager
|
product: security_access_manager
|
||||||
tags: panel,ibm
|
tags: panel,ibm,login,detect
|
||||||
|
|
||||||
http:
|
http:
|
||||||
- method: GET
|
- method: GET
|
||||||
|
@ -27,7 +28,9 @@ http:
|
||||||
- type: word
|
- type: word
|
||||||
words:
|
words:
|
||||||
- "<title>IBM Security Access Manager</title>"
|
- "<title>IBM Security Access Manager</title>"
|
||||||
|
- "IBM Security <em>Access Manager</em>"
|
||||||
part: body
|
part: body
|
||||||
|
condition: or
|
||||||
|
|
||||||
- type: word
|
- type: word
|
||||||
words:
|
words:
|
||||||
|
@ -40,4 +43,3 @@ http:
|
||||||
- "/mga/sps/authsvc/policy/forgot_password"
|
- "/mga/sps/authsvc/policy/forgot_password"
|
||||||
part: body
|
part: body
|
||||||
condition: and
|
condition: and
|
||||||
# digest: 4a0a00473045022100b3c31b972a1af3fbf321e8d2fad135f3c60e69ab84023684e3bdc1903e0a3f75022016212bd0980f645527268ebe265aed9838f5fe47d1fd9a37ffbac227e5765894:922c64590222798bb761d5b6d8e72950
|
|
Loading…
Reference in New Issue